Phoenix
Sigma IntelligenceBeta
Rule Library

Sigma Rules

1 rule found for "Cedric Maurugeon"

3,707Total
3,116Detection
451Emerging
137Hunting
Threat Huntmediumtest

Potential Data Exfiltration Via Curl.EXE

Detects the execution of the "curl" process with "upload" flags. Which might indicate potential data exfiltration

WindowsProcess Creation
TA0010 · ExfiltrationTA0011 · Command and ControlT1567 · Exfiltration Over Web ServiceT1105 · Ingress Tool Transfer+1
Florian Roth (Nextron Systems)+1Fri Jul 03windows